This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133342e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3133342e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: EhM3cIH1+X9lHQGy7U2ie99mGC9BFUCFibfrD183als= Subject key identifier: DC:63:EC:D9:37:EE:B4:8F:94:95:E4:64:E4:6C:54:3F:E3:06:AA:96 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 47D851089DF4D26A4B6A8B6562703A33CCFFA512 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133342e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 10:58:37 +0000 ROA not before: Thu 20 Nov 2025 10:53:37 +0000 ROA not after: Thu 19 Nov 2026 10:58:37 +0000 asID: 9304 IP address blocks: 147.125.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d8:51:08:9d:f4:d2:6a:4b:6a:8b:65:62:70:3a:33:cc:ff:a5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:53:37 2025 GMT Not After : Nov 19 10:58:37 2026 GMT Subject: CN=DC63ECD937EEB48F9495E464E46C543FE306AA96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:f4:bc:12:dc:b5:4e:e0:80:cb:4f:f3:5c: 23:58:64:7a:84:a6:7f:eb:e9:01:10:b9:ea:3e:1b: 86:57:b1:f6:0c:4b:c0:86:80:a4:1f:c6:b7:fd:c2: fe:97:1f:7b:2d:99:57:92:66:1f:92:bb:67:be:2b: 7e:54:3b:36:d3:ca:37:92:67:c6:a1:dc:d7:c5:40: 92:6e:f8:50:79:3c:25:bb:db:41:1c:04:8d:71:4b: 71:f5:75:23:cb:8d:d5:89:88:f4:5a:eb:1b:3e:8c: cc:5c:4f:18:87:d5:09:35:af:81:f8:4f:47:06:63: 75:f8:69:81:00:65:4c:66:0d:10:04:dd:43:fe:99: 85:ea:8a:18:61:9a:50:c6:25:9d:0e:20:30:65:c2: dc:84:75:9c:3d:72:90:1b:ea:b5:e9:e5:ed:c1:c3: b4:6e:58:a9:7e:9c:cb:86:a6:19:a3:5f:89:5e:da: 6d:f8:06:4e:eb:06:6d:c8:21:6e:49:70:d3:89:87: 8b:b1:fc:fa:fc:79:01:f2:ca:67:d8:31:15:00:fb: 48:9f:01:c7:01:1c:dc:f9:d7:27:74:ff:cd:cd:0f: bd:ae:db:90:f0:39:28:c1:bd:11:4a:bc:5b:88:76: 9e:74:02:e1:b9:a9:0f:b5:68:df:47:37:6e:f4:5e: 97:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:63:EC:D9:37:EE:B4:8F:94:95:E4:64:E4:6C:54:3F:E3:06:AA:96 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133342e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.134.0/24 Signature Algorithm: sha256WithRSAEncryption 81:03:5e:d4:a5:ad:58:78:b6:a2:7f:2a:e0:9d:ad:33:ec:82: da:a8:b7:2a:49:df:81:65:57:3f:a1:3f:6c:25:36:af:d9:3e: 2b:4b:4f:04:f8:7d:e3:4a:ee:78:b5:8f:cb:0a:b2:0e:db:c9: 7e:b9:62:20:7c:f6:1b:09:a6:1c:fc:69:90:9c:55:f2:f5:eb: d5:1b:bf:ac:67:08:e9:c5:7b:ad:23:54:8a:3d:a9:3f:6a:1e: be:17:ab:18:13:e9:2f:af:fd:1f:11:fa:da:41:47:94:72:e1: 8c:85:94:95:1b:77:11:63:20:a6:07:07:55:d3:22:12:59:14: ce:b4:ff:ee:70:40:1c:6b:8e:73:4a:d3:46:0d:fb:9a:27:c5: 6a:ac:35:54:2b:e4:9a:c3:80:dd:43:8e:65:b2:16:8f:43:4a: 06:a7:a6:4f:0a:0f:64:3b:0c:d5:0b:d4:3f:3d:18:90:d5:f1: 3e:e4:d6:47:bf:41:5f:ed:19:ed:df:d1:2a:89:30:e2:f8:61: c5:bf:c6:a1:43:2c:c7:8d:4c:e0:a0:49:5e:6a:a9:c7:7a:40: 4b:12:ed:77:6e:f3:71:b5:83:50:93:b9:84:4d:a2:fe:86:55: d7:05:c2:43:69:63:f8:0a:ec:84:3c:ca:b4:50:9f:4e:bd:53: 40:45:01:ae -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUR9hRCJ300mpLaotlYnA6M8z/pRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDUzMzdaFw0yNjExMTkxMDU4MzdaMDMxMTAvBgNV BAMTKERDNjNFQ0Q5MzdFRUI0OEY5NDk1RTQ2NEU0NkM1NDNGRTMwNkFBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RvS8Ety1TuCAy0/zXCNYZHqE pn/r6QEQueo+G4ZXsfYMS8CGgKQfxrf9wv6XH3stmVeSZh+Su2e+K35UOzbTyjeS Z8ah3NfFQJJu+FB5PCW720EcBI1xS3H1dSPLjdWJiPRa6xs+jMxcTxiH1Qk1r4H4 T0cGY3X4aYEAZUxmDRAE3UP+mYXqihhhmlDGJZ0OIDBlwtyEdZw9cpAb6rXp5e3B w7RuWKl+nMuGphmjX4le2m34Bk7rBm3IIW5JcNOJh4ux/Pr8eQHyymfYMRUA+0if AccBHNz51yd0/83ND72u25DwOSjBvRFKvFuIdp50AuG5qQ+1aN9HN270Xpf3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU3GPs2TfutI+UleRk5GxUP+MGqpYwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32GMA0GCSqGSIb3DQEBCwUAA4IBAQCBA17Upa1YeLaifyrgna0z7ILaqLcqSd+B ZVc/oT9sJTav2T4rS08E+H3jSu54tY/LCrIO28l+uWIgfPYbCaYc/GmQnFXy9evV G7+sZwjpxXutI1SKPak/ah6+F6sYE+kvr/0fEfraQUeUcuGMhZSVG3cRYyCmBwdV 0yISWRTOtP/ucEAca45zStNGDfuaJ8VqrDVUK+Saw4DdQ45lshaPQ0oGp6ZPCg9k OwzVC9Q/PRiQ1fE+5NZHv0Ff7Rnt39EqiTDi+GHFv8ahQyzHjUzgoEleaqnHekBL Eu13bvNxtYNQk7mETaL+hlXXBcJDaWP4CuyEPMq0UJ9OvVNARQGu -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:34 2025 by rpki-client